Path Traversal in Archive\ \
CVE-2007-4829
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.043 (90.2th percentile) — read the EPSS interpretation.
Affected products
- Archive\ \ — versions tar_project
- Canonical Ubuntu_linux — versions 6.06, 7.10, 8.04
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- secalert@redhat.com (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
- secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
- secalert@redhat.com (Mailing List, Third Party Advisory, x_refsource_MISC)
- secalert@redhat.com (Permissions Required, vdb-entry, x_refsource_VUPEN)
- secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory, Third Party Advisory)
- secalert@redhat.com (x_refsource_OSVDB, vdb-entry, Broken Link)
- secalert@redhat.com (x_refsource_CONFIRM, Broken Link)
- secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)